Flint 0.1.5

Verify before you install

Every artifact here is signed with GitHub build provenance - a Sigstore attestation binding the file's digest to this repository, this workflow, and the commit that built it. There is no maintainer key to fetch and no trust-on-first-use step.

gh attestation verify BTCPayServer.Plugins.Flint.btcpay --repo sethforprivacy/flint

Offline, against the attestation.jsonl bundle attached below rather than GitHub's API:

gh attestation verify BTCPayServer.Plugins.Flint.btcpay \
  --bundle attestation.jsonl --repo sethforprivacy/flint

SHA256SUMS is attested too, so it can be trusted once verified. One quirk: BTCPay's PluginPacker writes it with a single space between hash and filename. GNU sha256sum -c accepts that; macOS's shasum -a 256 -c rejects the whole file, so on macOS compare shasum -a 256 <file> by eye.

Installing

Server settings Plugins Upload plugin, and select BTCPayServer.Plugins.Flint.btcpay. BTCPay restarts itself to finish. Requires BTCPay Server 2.4.1 or newer, on a non-Alpine host.

Read CHANGELOG.md for what is in this release and how far it has actually been proven, and the trust model, before you put money through it.

What's Changed

• Route every settled BOLT11 to its BTCPay invoice, surviving restarts by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/38
• Release 0.1.5.5 by @sethforprivacy in https://github.com/sethforprivacy/flint/pull/39

Full Changelog: https://github.com/sethforprivacy/flint/compare/v0.1.5.4...v0.1.5.5